{
    "properties": {
        "AutoJoin": {
            "default": true,
            "description": "Automatically join the network",
            "type": "boolean"
        },
        "CaptiveBypass": {
            "default": false,
            "description": "Do not show the captive network sheet",
            "type": "boolean"
        },
        "DisplayedOperatorName": {
            "description": "HotSpot 2.0 operator name",
            "type": "string"
        },
        "DomainName": {
            "description": "HotSpot 2.0 domain name",
            "type": "string"
        },
        "EAPClientConfiguration": {
            "description": "Specifies 802.1x EAP authentication parameters",
            "properties": {
                "AcceptEAPTypes": {
                    "description": "The EAP types accepted",
                    "items": {
                        "description": "An integer representing an EAP type, inside of the Accept EAP Types array",
                        "enum": [
                            13,
                            17,
                            21,
                            25,
                            43,
                            18,
                            23
                        ],
                        "type": "number"
                    },
                    "type": "array"
                },
                "EAPFASTProvisionPAC": {
                    "default": false,
                    "description": "If set, provisions the device ",
                    "type": "boolean"
                },
                "EAPFASTProvisionPACAnonymously": {
                    "default": false,
                    "description": "If set, provisions the device anonymously. Note that there are known man-in-the-middle attacks for anonymous provisioning",
                    "type": "boolean"
                },
                "EAPFASTUsePAC": {
                    "default": false,
                    "description": "If set, the device will use an existing PAC if it's present. Otherwise the server must present its identity using a certificate",
                    "type": "boolean"
                },
                "EAPSIMNumberOfRANDs": {
                    "default": 3,
                    "description": "The minimum number of RAND values accepted from the server. 3 is the default, and 2 is allowed, but offers less security. For use with EAP-SIM only.",
                    "type": "number"
                },
                "OneTimeUserPassword": {
                    "default": false,
                    "description": "If set, the user will be prompted for a password each time they connect to the network",
                    "type": "boolean"
                },
                "OuterIdentity": {
                    "description": "If TTLS, PEAP, or EAP-FAST is used, this string is used instead of the user's identity outside the encrypted tunnel. This value can be used to mask the true identity of the person using the network",
                    "type": "string"
                },
                "PayloadCertificateAnchorUUID": {
                    "description": "Array of UUIDs corresponding to the trusted certificates for this authentication",
                    "items": {
                        "description": "A UUID for a trusted certificate",
                        "pattern": "^[0-9A-Za-z]{8}-[0-9A-Za-z]{4}-[0-9A-Za-z]{4}-[0-9A-Za-z]{4}-[0-9A-Za-z]{12}$",
                        "type": "string"
                    },
                    "type": "array"
                },
                "TLSAllowTrustExceptions": {
                    "description": "No longer supported in iOS 8 and later",
                    "type": "boolean"
                },
                "TLSTrustedServerNames": {
                    "description": "Array of Common Names of server certificates that can be trusted. The wildcard * can be used to match a range of strings",
                    "items": {
                        "description": "An item in the TLS Trusted Server Names array representing a Common Name of a server certificate.",
                        "type": "string"
                    },
                    "type": "array"
                },
                "TTLSInnerAuthentication": {
                    "default": "MSCHAPv2",
                    "description": "Specifies the inner authentication used by the TTLS module",
                    "enum": [
                        "PAP",
                        "EAP",
                        "CHAP",
                        "MSCHAP",
                        "MSCHAPv2"
                    ],
                    "type": "string"
                },
                "UserName": {
                    "description": "Username. If not provided, the user may be prompted during login",
                    "type": "string"
                },
                "UserPassword": {
                    "description": "Password. If not provided, the user may be prompted during login",
                    "type": "string"
                }
            },
            "type": "object"
        },
        "EncryptionType": {
            "default": "None",
            "description": "Wireless network encryption to use when connecting. The None value is available in iOS 5.0 and later and the WPA2 value is available in iOS 8.0 and later.",
            "enum": [
                "WEP",
                "WPA",
                "WPA2",
                "Any",
                "None"
            ],
            "type": "string"
        },
        "HIDDEN_NETWORK": {
            "default": false,
            "description": "If set, assumes the network is hidden. Otherwise the device will use broadcast SSID to identify the network.",
            "type": "boolean"
        },
        "IsHotspot": {
            "default": false,
            "description": "Is a legacy or Hotspot 2.0 network",
            "type": "boolean"
        },
        "MCCAndMNCs": {
            "description": "HotSpot 2.0 MCC/MNCs",
            "items": {
                "pattern": "^[0-9]{6}$",
                "type": "string"
            },
            "type": "array"
        },
        "NAIRealmNames": {
            "description": "HotSpot 2.0 NAI realm names",
            "items": {
                "type": "string"
            },
            "type": "array"
        },
        "NONEXISTENT": {
            "description": "",
            "type": "string"
        },
        "Password": {
            "description": "Specifies the password for the access point",
            "type": "string"
        },
        "PayloadCertificateUUID": {
            "description": "UUID of the certificate payload containing an identity used as the client credential",
            "pattern": "^[0-9A-Za-z]{8}-[0-9A-Za-z]{4}-[0-9A-Za-z]{4}-[0-9A-Za-z]{4}-[0-9A-Za-z]{12}$",
            "type": "string"
        },
        "PayloadDescription": {
            "default": "Configures Wi-Fi settings",
            "description": "Description of the payload",
            "type": "string"
        },
        "PayloadDisplayName": {
            "default": "Wi-Fi",
            "description": "Name of the payload",
            "type": "string"
        },
        "PayloadIdentifier": {
            "default": "com.apple.wifi.managed",
            "description": "A unique identifier for the payload, dot-delimited.  Usually root PayloadIdentifier+subidentifier",
            "type": "string"
        },
        "PayloadOrganization": {
            "description": "This value describes the issuing organization of the profile, as displayed to the user",
            "type": "string"
        },
        "PayloadType": {
            "default": "com.apple.wifi.managed",
            "description": "The type of the payload, a reverse dns string",
            "type": "string"
        },
        "PayloadUUID": {
            "default": "",
            "description": "Unique identifier for the payload (format 01234567-89AB-CDEF-0123-456789ABCDEF)",
            "pattern": "^[0-9A-Za-z]{8}-[0-9A-Za-z]{4}-[0-9A-Za-z]{4}-[0-9A-Za-z]{4}-[0-9A-Za-z]{12}$",
            "type": "string"
        },
        "PayloadVersion": {
            "default": 1,
            "description": "The version of the whole configuration profile.",
            "type": "number"
        },
        "ProxyPACFallbackAllowed": {
            "description": "Proxy PAC Fallback Allowed",
            "type": "boolean"
        },
        "ProxyPACURL": {
            "description": "URL used to recieve proxy settings",
            "type": "string"
        },
        "ProxyPassword": {
            "description": "The password to authenticate with the proxy",
            "type": "string"
        },
        "ProxyServer": {
            "description": "The hostname of the proxy server",
            "type": "string"
        },
        "ProxyServerPort": {
            "description": "The port used to connect to the proxy server",
            "maximum": 65535,
            "minimum": 0,
            "type": "number"
        },
        "ProxyType": {
            "default": "None",
            "description": "The type of proxy configuration to use for this wireless connection",
            "enum": [
                "None",
                "Manual",
                "Auto"
            ],
            "type": "string"
        },
        "ProxyUsername": {
            "description": "The username for proxy server authentication",
            "type": "string"
        },
        "QoSMarkingPolicy": {
            "description": "Restrict fast lane QoS marking",
            "properties": {
                "QoSMarkingAppleAudioVideoCalls": {
                    "default": true,
                    "description": "Enable QoS for WiFi Calling, FaceTime, SMS, etc.",
                    "type": "boolean"
                },
                "QoSMarkingEnabled": {
                    "default": true,
                    "description": "Enable any kind of QoS marking",
                    "type": "boolean"
                },
                "QoSMarkingWhitelistedAppIdentifiers": {
                    "description": "Whitelist specific apps for QoS marking",
                    "items": {
                        "default": "",
                        "description": "Whitelisted App",
                        "type": "string"
                    },
                    "type": "array"
                }
            },
            "type": "object"
        },
        "RoamingConsortiumOIs": {
            "description": "HotSpot 2.0 organization identifiers",
            "items": {
                "pattern": "^([0-9A-Za-z]{6})|([0-9A-Za-z]{9})$",
                "type": "string"
            },
            "type": "array"
        },
        "SSID_STR": {
            "description": "SSID of the Wi-Fi network to be used",
            "type": "string"
        },
        "ServiceProviderRoamingEnabled": {
            "default": false,
            "description": "HotSpot 2.0 allow roaming flag",
            "type": "boolean"
        },
        "TLSCertificateRequired": {
            "description": "If set, force a non-default authentication method. (if YES, uses certificate from PayloadCertificateUUID)",
            "type": "boolean"
        }
    },
    "title": "com.apple.wifi.managed",
    "type": "object"
}